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Abstract 

Single node failures represent more than 85% of all 
node failures[7] in the today's large communication net- 
works such as the Internet. Also, these node failures are 
usually transient. Consequently, having the routing paths 
globally recomputed does not pay off since the failed nodes 
recover fairly quickly, and the recomputed routing paths 
need to be discarded. Instead, we develop algorithms and 
protocols for dealing with such transient single node fail- 
ures by suppressing the failure ( instead of advertising it 
across the network), and routing messages to the destina- 
tion via alternate paths that do not use the failed node. We 
compare our solution to that of HI1\I . which also discusses 
such a proactive recovery scheme for handling transient 
node failures. We show that our algorithms are faster by 
an order of magnitude while our paths are equally good. 
We show via simulation results that our paths are usually 
within 15% of the optimal for randomly generated graph 
with 100-1000 nodes. 

KEY WORDS: Network Protocols, Node Failure Recov- 
ery, Transient Node Failures, Alternate Path Routing. 



1 Introduction 

Let G = (V, E) be an edge weighted graph that represents 
a computer network, where the weight (positive real num- 
ber), denoted by cost{e), of the edges represents the cost 
(time) required to transmit a packet through the edge (link). 
The number of vertices (|y|) is n and the number of edges 
( I i? I) is TO. It is well known that a shortest paths tree of a 
node s, 7^, specifies the fastest way of transmitting a mes- 
sage to node s originating at any given node in the graph 
under the assumption that messages can be transmitted at 
the specified costs. Under normal operation the routes are 
the fastest, but when the system carries heavy traffic on 
some links these routes might not be the best routes. These 
trees can be constructed (in polynomial time) by finding a 
shortest path between every pair of nodes. In this paper 
we consider the case when the nodes in the network are 
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susceptible to transient faults. These are sporadic faults of 
at most one nod^H at a time that last for a relatively short 
period of time. This type of situation has been studied in 
the past 111] because it represents most of the node fail- 
ures occurring in networks. Single node failures represent 
more than 85% of all node failures |7|. Also, these node 
failures are usually transient, with 46% lasting less than a 
minute, and 86% lasting less than 10 minutes |7|. Because 
nodes fail for relative short periods of time, propagating in- 
formation about the failure throughout the network is not 
recommended. 

In this paper we consider the case where the net- 
work is biconnected (2-node-connected), meaning that the 
deletion of a single node does not disconnect the network. 
Based on our previous assumptions about failures, a mes- 
sage originating at node x with destination s will be sent 
along the path specified by Tg until it reaches node s or a 
node (other than s) that failed. In the latter case, we need to 
use a recovery path to s from that point. Since we assume 
single node faults and the graph is biconnected, such a path 
always exists. We call this problem of finding the recovery 
paths the Single Node Failure Recovery (SNFR) problem. 
It is important to recognize that the recovery path depends 
heavily on the protocol being deployed in the system. Later 
on we discuss our (simple) routing protocol. 

1.1 Preliminaries 

Our communication network is modeled by an edge- 
weighted biconnected undirected graph G — (V, E), with 
n = |F| and m — \E\. Each edge e ^ E has an associated 
cost (weight), denoted by cost{e), which is a non-negative 
real number. pg{s, t) denotes a shortest path between s and 
t in graph G and ^^(s, t) to denote its cost (weight). 

A shortest path tree Tg for a node s is a collection of 
n— 1 edges {ei, 62, ... , e„_i} of G which form a spanning 
tree of G such that the path from node u to s in 7^ is a 
shortest path from u to s in G. We say that Tg is rooted at 
node s. With respect to this root we define the set of nodes 
that are the children of each node x as follows. In Tg we 
say that every node y that is adjacent to x such that x is on 
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the path in 7^ from y to s, is a child of x. For each node x 
in the shortest paths tree, denotes the number of children 
of X in the tree, and Cx = {xi ,X2,--- Xk^ } denotes this set 
of children of the node x. Also, x is said to be the parent 
of each Xi £ Cx in the tree Tg. With respect to s, the parent 
node, p, of a node c is sometimes referred to as the primary 
neighbor or primary router of c, while c is referred to as an 
upstream neighbor or upstream router of p. The children 
of a particular node are said to be siblings of each other. 
14 (T) denotes the set of nodes in the subtree of x in the 
tree T and Ex E denotes the set of all edges incident 
on the node x in the graph G. We use nextHop{x, y) to 
denote the next node from x on the shortest path tree from 
x to y. Note that by definition, nextHop{x, y) is the parent 
of X in 7^ . 

Finally, we use px to denote the escape edge in 
G{E)\Ts that the node x uses to recover from the failure of 
its parent. As we discuss later, having the information of a 
single escape edge px for each node x E G{V) and x ^ s 
is sufficient to construct the entire alternate path for any 
node to recover from the failure of its parent, even though 
the path may actually contain multiple non-tree edges. 

1.2 Related Work 

One popular approach of tackling the issues related to tran- 
sient failures of network elements is that of using proactive 
recovery schemes. These schemes typically work by pre- 
computing alternate paths at the network setup time for the 
failure scenarios, and then using these alternate paths to re- 
route the traffic when the failure actually occurs. Also, the 
information of the failure is suppressed in the hope that it 
is a transient failure. The local rerouting based solutions 
proposed in HI |6] |9] [lOl 1 1 fall into this category. 

Refs. Is] [TTl present protocols based on local re- 
routing for dealing with transient single link and single 
node failures respectively. They demonstrate via simula- 
tions that the recovery paths computed by their algorithm 
are usually within 15% of the theoretically optimal alter- 
nate paths. 

Wang and Gao's Backup Route Aware Protocol ifTOl 
also uses some precomputed backup routes in order to han- 
dle transient single link failures. One problem central to 
their solution asks for the availability of reverse paths at 
each node. However, they do not discuss the computation 
of these reverse paths. Interestingly, the alternate paths 
that our algorithm computes qualify as the reverse paths 
required by the BRAP protocol of lITOl . 

Slosiar and Latin |9 | studied the single link failure re- 
covery problem and presented an Oirfi) time for comput- 
ing the link-avoiding alternate paths. A faster algorithm, 
with a running time of 0(m + nlogn) for this problem 
was presented in [jj. Our central protocol presented in this 
paper can be generaUzed to handle single link failures as 
well. Unlike the protocol of [8|, this single link failure re- 
covery protocol would use optimal recovery paths. 



1.3 Problem Definition 

The Single Node Failure Recovery problem, is defined 
as follows: (SNFR) Given a biconnected undirected edge 
weighted graph G = {V, E), and the shortest paths tree 
Ts{G) of a node s in G where Cx = {xi,X2, ■ ■ ■ Xk-^} de- 
notes the set of children of the node a; in 7^, for each node 
X € V and x 7^ s, find a path from Xi e to s in the 
graph G = {V\ {x}, E\Ex), where Ex is the set of edges 
adjacent to vertex x. 

In other words, for each node x in the graph, we are 
interested in finding alternate paths from each of its chil- 
dren to the sourc^node s when the node x fails. Note that 
we don't consider the problem to be well defined when the 
node s fails. 

The above definition of alternate paths matches that 
in [10| for reverse paths: for each node x € G{V), find 
a path from x to the node s that does not use the primary 
neighbor (parent node) ?/ of x in 7^ . 

1.4 Main Results 

We discuss our efficient algorithm for the SNFR problem 
that has a running time of 0(m log n) (by contrast, the al- 
ternate path algorithms of ll6l[8l [Tn have a time complexity 
of n{mn\ogn) per destination). We further develop pro- 
tocols based on this algorithm for recovering from single 
node transient failures in communication networks. In the 
failure free case, our protocol does not use any extra re- 
sources. 

The recovery paths computed by our algorithm are 
not necessarily the shortest recovery paths. However, we 
demonstrate via simulation results that they are very close 
to the optimal paths. 

We compare our results with those of fill wherein the 
authors have also studied the same problem and presented 
protocols based on local rerouting for dealing with transient 
single node failures. One important difference between the 
algorithms of ||6l [8] [TT| and our's is that unlike our algo- 
rithm, these are based primarily on recomputations. Con- 
sequently, our algorithm is faster by an order of magnitude 
than those in ll6]|8][TT], and as shown by our simulation re- 
sults, our recovery paths are usually comparable, and some- 
times better. 

2 Algorithm for Single Node Failure Recov- 
ery 

A naive algorithm for the SNFR problem is based on re- 
computation: for each node v e G{V) and v ^ s, compute 
the shortest paths tree of s in the graph G{V\v, E\Ey). Of 
interest are the paths from s to each of the nodes Vi G C^. 
This naive algorithm invokes a shortest paths algorithm 

- We use source and destination in an interchangeable way 
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n — 1 times, and thus takes 0{mn + logn) time when 
it uses the Fibonacci heap f3l implementation of Dijkstra's 
shortest paths algorithm |2|. While these paths are optimal 
recovery paths for recovering from the node failure, their 
structure can be much different from each other, and from 
the original shortest paths (in absence of any failures) - to 
the extent that routing messages along these paths may in- 
volve recomputing large parts of the primary routing tables 
at the nodes through which these paths pass. The recovery 
paths computed by our algorithm have a well defined struc- 
ture, and they overlap with the paths in the original shortest 
paths tree (7^) to an extent that storing the information of 
a single edge, p^, at each node x provides sufficient infor- 
mation to infer the entire recovery path. 

2.1 Basic Principles and Observations 

We start by describing some basic observations about the 
characteristics of the recovery paths. We also categorize the 
graph edges according to their role in providing recovery 
paths for a node when its parent fails. 




Figure 1 . Recovery paths for recovering from the failure of 

X. 

Figure[T|illustrates a scenario of a single node failure. 
In this case, the node x has failed, and we need to find re- 
covery paths to s from each Xi £ Cx- When a node fails, 
the shortest paths tree of s, Tg, gets split into + 1 com- 
ponents - one containing the source node s and each of the 
remaining ones contain one subtree of a child Xi G Cx- 

Notice that the edge {gp,gq} (Figure [T]i, which has 
one end point in the subtree of Xj, and the other outside 
the subtree of x provides a candidate recovery path for the 
node Xj. The complete path is of the form pa{xj,gp) 
{9pi 9q} ^ Poigq, s). Since gq is outside the subtree of x, 
the path paigq, s) is not affected by the failure of x. Edges 
of this type (from a node in the subtree of Xj G Ca; to a 
node outside the subtree of x) can be used by Xj e Cx to 



escape the failure of node x. Such edges are called green 
edges. For example, edge {gp, gq} is a green edge. 

Next, consider the edge &„} (Figure [U between 
a node in the subtree of Xi and a node in the subtree of 
Xj . Although there is no green edge with an end point in 
the subtree of Xi, the edges {bu,by} and {gp, gq} together 
offer a candidate recovery path that can be used by Xi to 
recover from the failure of x. Part of this path connects Xi 
to Xj {pG{xt,bu) ^ {bu, by} ^ pG{bv,Xj)), after which it 
uses the recovery path of Xj (via Xj 's green edge, {gp, gq}). 
Edges of this type (from a node in the subtree of Xi to a 
node in the subtree of a sibling Xj for some i ^ j) are 
called blue edges. Another example of a blue edge is edge 
{bp, bq} which can be used the node xi to recover from the 
failure of x. 

Note that edges like {ra,rb} and {bv,gp} (Figure[l]) 
with both end points within the subtree of the same child 
of X do not help any of the nodes in Cx to find a recovery 
path from the failure of node x. We do not consider such 
edges in the computation of recovery paths, even though 
they may provide a shorter recovery path for some nodes 
(e.g. {by, gp} may offer a shorter recovery path to Xi). The 
reason for this is that routing protocols would need to be 
quite complex in order to use this information. We care- 
fully organize the green and blue edges in a way that al- 
lows us to retain only the useful edges and eliminate useless 
(red) ones efficiently. 

We now describe the construction of a new graph TZx, 
the recovery graph for x, which will be used to compute 
recovery paths for the elements of Cx when the node x fails. 
A single source shortest paths computation on this graph 
suffices to compute the recovery paths for all Xi G Cx. 

The graph TZx has kx + 1 nodes, where kx = \Cx\. A 
special node, Sx, represents the source node s in the origi- 
nal graph G = {V, E). Apart from Sx, we have one node, 
denoted by yi, for each Xi G Cx- We add all the green and 
blue edges defined earlier to the graph TZx as follows. A 
green edge with an end point in the subtree of Xi (by defi- 
nition, green edges have the other end point outside the sub- 
tree of x) translates to an edge between Sx and yi. A blue 
edge with an end point in the subtree of Xi and the other 
in the subtree of Xj translates to an edge between nodes 
yi and j/j . However, the weight of each edge added to TZx 
is not the same as the weight of the green or blue edge in 
G = (y, E) used to define it. The weights are specified 
below. 

Note that the candidate recovery path of Xj that uses 
the green edge g — {gp, gq} has total cost equal to; 

greenWeight{g) = daixj , gp) + cost{gp, gq) + daigq, s) 

(1) 

As discussed earlier, a blue edge provides a path con- 
necting two siblings of x, say Xi and Xj. Once the path 
reaches Xj, the remaining part of the recovery path of Xi 
coincides with that of Xj. If {bu,by} is the blue edge con- 
necting the subtrees of Xi and Xj (the cheapest one corre- 



spending to the edge {yi,yj}), the length of the subpath 
from Xi to Xj is: 

blueWeight{b) = dcixi, 6„) + cost{bu, by) + dciby, Xj) 

(2) 

We assign this weight to the edge corresponding to 
the blue edge b^} that is added in TZ^ between yi and 

The construction of our graph TZ^ is now complete. 
Computing the shortest paths tree of in TZx provides 
enough information to compute the recovery paths for all 
nodes Xi G Cx when x fails. 

2.2 Description of the Algorithm and its Analysis 

We now incorporate the basic observations described ear- 
lier into a formal algorithm for the SNFR problem. Then 
we analyze the complexity of our algorithm and show that 
it has a nearly optimal running time of 0{m log n). 

Our algorithm is a depth-first recursive algorithm over 
Ts. We maintain the following information at each node x: 

• Green Edges: The set of green edges in G = (V, E) 
that offer a recovery path for x to escape the failure of 
its parent. 

• Blue Edges: A set of edges {p, q} inG — {V, E) such 
that X is the nearest-common-ancestor of p and q with 
respect to the tree 7^. 

The set of green edges for node x is maintained in 
a mill heap {priority queue) data structure, which is de- 
noted by Tix- The heap elements are tuples of the form 
< e, greenWeight{e) + dG{s,x) > where e is a green 
edge, and greenWeight{-) + daisjx) defines its prior- 
ity as an element of the heap. Note that the extra element 
dais, x) is added in order to maintain invariance that the 
priority of an edge in any heap H remains constant as the 
path to s is traversed. Initially Hx contains an entry for 
each edge of x which serves as a green edge for it (i.e. an 
edge of X whose other end point does not lie in the sub- 
tree of the parent of x). A linked list, Bx, stores the tu- 
ples < e, blueW eight{e) >, where e is a blue edge, and 
blueW eight{e) is the weight of e as defined by the equa- 
tion ©. 

The heap Tixi built by merging together the Ti 
heaps of the nodes mCxi, the set of children on Xi. Con- 
sequently, all the elements in Tix^ may not be green edges 
for Xi. Using a dfs labeling scheme similar to the one in 
HI, we can quickly determine whether the edge retrieved 
by findMin{'Hxi) is a valid green edge for Xi or not. If 
not, we remove the entry corresponding to the edge from 
TCxi ^ deleteMin{'Hxi) operation. Note that since the 
deleted edge cannot serve as a green edge for Xi, it cannot 
serve as one for any of the ancestors of Xi, and it doesn't 
need to be added back to the Hx heap for any x. We con- 
tinue deleting the minimum weight edges from Hxi till ei- 
ther Hxi becomes empty or we find a green edge valid for 
Xi to escape x's failure, in which case we add it to TZx- 



After adding the green edges to TZx, we add the blue 
edges from Bx to TZx- 

Finally, we compute the shortest paths tree of the node 
Sx in the graph TZx using a standard shortest paths algo- 
rithm (e.g. Dijkstra's algorithm [2]). The escape edge for 
the node Xi is stored as the parent edge of Xi in Tg^ , the 
shortest paths tree of Sx in TZx- Since the communication 
graph is assumed to be bi-connected, there exists a path 
from each node Xi E Cx to Sx, provided that the failing 
node is not s. 

For brevity, we omit the detailed analysis of the algo- 
rithm. The O(TOlogn) time complexity of the algorithm 
follows from the fact that (1) An edge can be a blue edge in 
the recovery graph of exactly one node: that of the nearest- 
common-ancestor of its two end points, and (2) An edge 
can be deleted at most once from any Ti heap. We state the 
result as the following theorem. 

Theorem 2.1 Given an undirected weighted graph G = 
(V, E) and a specified node s, the recovery path from each 
node Xi to s to escape from the failure of the parent of x is 
computed by our procedure in 0{m log n) time. 

3 Single Node Failure Recovery Protocol 

When routing a message to a node s, if a node x needs to 
forward the message to another node y, the node y is the 
parent of x in the shortest paths tree Ts of s. The SNFR 
algorithm computes the recovery path from a; to s which 
does not use the node y. In case a node has failed, the 
protocol re-routes the messages along these alternate paths 
that have been computed by the SNFR algorithm. 

3.1 Embedding the Escape Edge 

In our protocol, the node x that discovers the failure of y 
embeds information about the escape edge to use in the 
message. The escape edge is same as the px edge identified 
for the node x to use when its parent (y, in this example) 
has failed. We describe two alteratives for embedding the 
escape edge information in the message, depending on the 
particular routing protocol being used. 

Protocol Headers 

In several routing protocols, including TCP, the mes- 
sage headers are not of fixed size, and other header fields 
(e.g. Data Of f set in TCP) indicate where the actual 
message data begins. For our purpose, we need an addi- 
tional header space for two node identifiers (e.g. IP ad- 
dresses, and the port numbers) which define the two end 
points of the escape edge. It is important to note that this 
extra space is required only when the messages are being 
re-routed as part of a failure recovery. In absence of fail- 
ures, we do not need to modify the message headers. 
Recovery Message 

In some cases, it may not be feasible or desirable to 
add the information about the escape edge to the protocol 



headers. In such situations, the node x that discovers the 
failure of its parent node y during the dehvery of a mes- 
sage Aio, constructs a new message, Air, that contains 
information for recovering from the failure. In particular, 
the recovery message, A4r contains (a) Mo- the original 
message, and (b) = {p^, Qx)' the escape edge to be used 
by X to recover from the failure of its parent. 

With either of the above two approaches, a light 
weight application is used to determine if a message is be- 
ing routed in a failure free case or as part of 2l failure recov- 
ery, and take appropriate actions. Depending on whether 
the escape edge information is present in the messagae, 
the application decides which node to forward the message 
to. This process consumes almost negligible additional re- 
sources. As a further optimization, this application can use 
a special reserved port on the routers, and messages would 
be sent to it only during the failure recovery mode. This 
would ensure that no additional resources are consumed in 
the failure free case. 
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Figure 2. 



3.2 Protocol Illustration 

For brevity we do not formally specify our protocol, but 
only illustrate how it works. Consider the network in Fig- 
ure [T] If Xi notices that x has failed, it adds information in 
the message (using one of the two options discussed above) 
about {bu,by} as the escape edge to use, and reroutes the 
message to &„. 6„ clears the escape edge information, and 
sends the message to by, after which it follows the regular 
path to s. If X has not recovered when the message reaches 
Xj, Xj reroutes with message to gp with {gp, gq} as the es- 
cape edge to use. This continues till the message reaches a 
node outside the subtree of x, or till x recovers. 

Note that since the alternate paths are used only dur- 
ing failure recovery, and the escape edges dictate the al- 
ternate paths, the protocol ensures loop free routing, even 
though the alternate paths may form loops with the original 
routing (shortest) paths. 



4 Simulation Results and Comparisons 

We present the simulation results for our algorithm, and 
compare the lengths of the recovery paths generated by our 
algorithm to the theoretically optimal paths as well as with 
the ones computed by the algorithm in [ 11 1. In the imple- 
mentation of our algorithm, we have used standard data 
structures (e.g. binary heaps instead of Fibonacci heaps 
131 : binary heaps suffer from a linear-time merge/meld op- 
eration as opposed to constant time for the latter). Conse- 
quently, our algorithms have the potential to produce much 
better running times than what we report. 

We ran our simulations on randomly generated 
graphs, with varying the following parameters: (a) Num- 
ber of nodes, and (6) Average degree of a node. The 
edge weights are randomly generated numbers between 
100 and 1000. In order to guarantee that the graph is 2- 



node-connected (biconnected), we ensure that the gener- 
ated graph contains a Hamiltonian cycle. Finally, for each 
set of these parameters, we simulate our algorithm on mul- 
tiple random graphs to compute the average value of the of 
a metric for the parameter set. The algorithms have been 
implemented in the Java programming language (1.5.0.12 
patch), and were run on an Intel machine (Pentium IV 
3.06GHz with 2GB RAM). 
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The stretch factor is defined as the ratio of the lengths 
of recovery paths generated by our algorithm to the lengths 
of the theoretically optimal paths. The optimal recovery 
path lengths are computed by recomputing the shortest 
paths tree of s in the graph G{V\x, E\Ex). In the figures 



12131 . the Fir labels relate to the performance of the alter- 
nate paths algorithm used by the Failure Insensitive Rout- 
ing protocol of 1 1 1 1, while the Crp labels relate to the per- 
formance of our algorithm for the SNFR problem. 

Though fTri doesn't present a detailed analysis of 
their algorithm, from our analysis, their algorithm needs 
at least il{mn log n) time per sink node in the system. Fig- 
ures 02131 compare the performance of our algorithm (CRP) 
to that of 111] (FIR). The plots for the running times of 
our algorithm and that of 1 11 1 fall in line with the theoret- 
ical analysis that our algorithms are faster by an order of 
magnitude than those of 1 11 1. Interestingly, the stretch fac- 
tors of the two algorithms are very close for most of the 
cases, and stay within 15%. The running time of the algo- 
rithms fall in line with our theoretical analysis. Our CRP 
algorithm runs within 50 seconds for graphs upto 600-700 
nodes, while the FIR algorithm's runtime shoots up to as 
high as 5 minutes as the number of nodes increase. The 
metrics are plotted against the variation in (1) the number 
of nodes (Figure ||2l), and (2) the average degree of the 
nodes (Figure |[3l). The average degree of a node is fixed at 
15 for the cases where we vary the number of nodes (Figure 
121), and the number of nodes is fixed at 300 for the cases 
where we plot the impact of varying average node degree 
(Figure 131). As expected, the stretch factors improve as 
the number of nodes increase. Our algorithm falls behind 
in finding the optimal paths in cases when the recovery path 
passes through the subtrees of multiple siblings. Instead of 
finding the best exit point out of the subtree, in order to 
keep the protocol simple and the paths well structured, our 
paths go to the root of the subtree and then follow its al- 
ternate path beyond that. These paths are formed using the 
blue edges. Paths discovered using a node's green edges 
are optimal such paths. In other words, if most of the edges 
of a node are green, our algorithm is more likely to find 
paths close to the optimal ones. Since the average degree 
of the nodes is kept fixed in these simulations, increasing 
the number of nodes increases the probability of the edges 
being green. A similar logic explains the plots in Figure 
13! . When the number of nodes is fixed, increasing the av- 
erage degree of a node results in an increase in the number 
of green edges for the nodes0 as well as the stretch factors. 

5 Concluding Remarks 

In this paper we have presented an efficient algorithm for 
the SNFR problem, and developed protocols for dealing 
with transient single node failures in communication net- 
works. Via simulation results, we show that our algorithms 
are much faster than those of fT\\, while the stretch factor 
of our paths are usually better or comparable. 

Previous algorithms ll6l[8l [Tn for computing alternate 
paths are much slower, and thus impose a much longer net- 
work setup time as compared to our approach. The setup 

"^When the average degree is very small, there are only a few alternate 
paths available, and the algorithms usually find the better ones among 
them, resulting in smaller stretch factors. 



time becomes critical in more dynamic networks, where 
the configuration changes due to events other than tran- 
sient node or link failures. Note that in several kinds of 
configuration changes (e.g. permanent node failure, node 
additions, etc), recomputing the routing paths (or other in- 
formation) cannot be avoided, and it is desirable to have 
shorter network setup times. 

For the case where we need to solve the SNFR prob- 
lem for all nodes in the graph, our algorithm would need 
0(mn log n) time, which is still very close to the time re- 
quired (0{mn + n? logn)) to build the routing tables for 
the all-pairs setting. The space requirement still stays linear 
in m and n. 

The directed version of the SNFR problem, where one 
needs to find the optimal (shortest) recovery paths can be 
shown to have a lower bound of Vl{m.in{my/n, n^)) using 
a construction similar to those used for proving the same 
lower bound on the directed version of SLFR| 1 1 and re- 
placement paths|4| problems. The bound holds under the 
path comparison model of |5 1 for shortest paths algorithms. 
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